FortiBleed campaign compromises credentials for 75,000 Fortinet firewalls (opens in new tab)

A massive credential-compromise campaign known as FortiBleed has exposed the login details for approximately 75,000 Fortinet FortiGate firewalls worldwide. Security researchers discovered an attacker-controlled server containing a highly automated infrastructure used to collect and crack configuration files from internet-facing devices. The stolen data includes a mix of administrative and SSL VPN credentials, potentially granting threat actors deep persistent access to enterprise networks. <a...